@techreport{kaizer-dnsop-ml-dsa-mtl-dnssec-00, number = {draft-kaizer-dnsop-ml-dsa-mtl-dnssec-00}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-kaizer-dnsop-ml-dsa-mtl-dnssec/00/}, author = {Andrew Kaizer and Joe Harvey and Burt Kaliski and Swapneel Sheth}, title = {{Module-Lattice-Based Signatures with Merkle Tree Ladders (ML-DSA-MTL) for DNSSEC}}, pagetotal = 23, year = 2026, month = jul, day = 6, abstract = {This document describes how to apply the Module-Lattice-Based Digital Signature Algorithm (ML-DSA) and Merkle Tree Ladders (MTL) as a conservative post-quantum cryptographic algorithm for DNS Security Extensions (DNSSEC). This combination is referred to as the ML-DSA- MTL Signature scheme. This document describes how to specify ML-DSA- MTL keys and signatures in DNSSEC, specifically for ML-DSA-44 with SHAKE-128. This document also provides guidance for use of EDNS(0) in signature retrieval.}, }